Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
File: RU_RwEv37B2rvS0h_aAIXiUexzU.mft (raw, json)
Hash identifier: lGoQxE5L+S2DOQ/HDxaN0bF0IRJkG5zb2fWL83hVxEM=
Subject key identifier: 40:57:C6:A9:66:1B:C8:B4:1A:71:3E:8D:75:33:FE:25:3C:66:B6:24
Authority key identifier: 45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
Certificate issuer: /CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Certificate serial: 019D38D342DE5E5DEE46D8BA135C69215100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
Manifest number: 13D3
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: RU_RwEv37B2rvS0h_aAIXiUexzU.crl (hash: dlZkbtwImNPIS/+jpN3mKzhsoGk4RP9RBDeOdedYkMo=)
2: vwdCRsg6gfNKt8uQxczBW40AhwA.roa (hash: zQgUR0JAzzWo4SijrJ+Bdd4OF1vyTIeqSDv8ul4PPDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:42:de:5e:5d:ee:46:d8:ba:13:5c:69:21:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=4057c6a9661bc8b41a713e8d7533fe253c66b624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:c2:07:01:50:7e:be:a6:dd:5e:df:0d:72:
0c:27:a8:c5:e1:4c:de:4f:6f:1b:7a:3c:e7:51:0e:
0a:d7:44:1e:b7:a4:34:05:cb:26:76:42:8d:4c:43:
cc:db:19:da:bf:02:98:77:70:d4:28:5b:dc:8d:9b:
c7:53:13:f7:ab:90:df:14:0e:eb:61:5e:48:35:4c:
a5:94:59:c7:7f:bb:c4:76:d8:54:f9:a5:94:76:7a:
91:29:aa:fb:a0:bf:7c:72:47:75:14:7c:e0:20:aa:
33:07:11:00:97:c8:61:70:fb:3c:48:32:5a:4c:bd:
76:bf:15:c1:a9:08:ea:cc:31:b4:ac:ec:0e:29:76:
e0:8a:65:f8:5a:de:d3:ac:c8:15:60:e4:f3:60:f2:
39:8a:19:c2:7b:e9:78:45:f3:45:7a:87:fd:df:45:
cc:a1:e8:16:a8:a1:33:6a:40:69:93:26:0b:1d:3b:
39:eb:7c:44:4a:41:7a:99:da:c7:6b:e9:50:08:cd:
d1:42:b7:68:4e:93:f5:a8:ca:1e:24:73:23:b0:60:
1a:e4:25:e5:8a:cc:a6:43:76:57:31:8d:76:61:f3:
cb:17:18:30:52:e1:78:98:d9:c1:bb:26:21:96:b4:
93:97:41:7e:5b:44:6b:ec:89:b7:2a:64:f0:c9:43:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:57:C6:A9:66:1B:C8:B4:1A:71:3E:8D:75:33:FE:25:3C:66:B6:24
X509v3 Authority Key Identifier:
keyid:45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d5:c3:dc:bf:db:23:40:34:4d:5a:7d:07:6e:ed:b4:61:05:
df:d4:30:71:9c:4b:8b:90:62:d3:2a:3d:84:05:f7:f8:50:d7:
0b:70:cc:bf:bf:9e:32:44:6b:18:dc:1e:d8:c6:07:28:d5:2a:
2a:da:16:34:63:2f:1e:2d:df:0e:30:fc:06:be:ab:3f:ae:c0:
24:61:08:ae:58:99:20:35:df:e2:8b:24:4f:34:cf:fe:30:3c:
b7:43:75:f2:8a:f1:86:d6:de:f3:6a:dc:2b:e7:1a:69:74:b7:
93:a4:12:97:b2:82:be:a8:36:80:5f:5a:73:e7:1c:06:7a:5b:
e1:e5:37:ba:1a:e3:d4:68:e9:74:b5:10:82:a9:de:0f:c6:1f:
f8:ca:ba:f3:2e:97:33:78:0b:42:a4:df:f0:a4:e1:94:00:81:
bf:06:30:6b:39:53:3b:96:2b:10:81:b7:08:9f:35:b0:16:fc:
ee:1c:f9:1d:d5:59:5d:64:79:ef:35:28:b1:c0:f2:2e:3d:cc:
76:cc:56:4d:a7:57:be:08:03:a0:b4:33:35:85:b5:e8:5a:d9:
67:22:2e:7d:46:4a:e8:9d:d1:1a:dc:18:b1:3f:1e:bc:95:24:
ed:21:10:2f:cb:7d:32:11:77:b6:0c:ef:44:cb:1e:f5:b7:65:
6f:60:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:49 2026 by rpki-client